$ rpki-client -vvf rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.mft File: s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.mft (raw, json) Hash identifier: rYwcmJganpZYixo5JMly+PGqGA7I3DfcwpfSEbOm8xA= Subject key identifier: B4:54:3A:D1:57:A8:4A:F3:45:41:70:8B:95:F2:8F:4A:F0:13:A5:52 Authority key identifier: B3:62:43:7A:B6:7D:29:0C:5C:DF:EF:2F:62:B7:7E:DD:8A:9F:FA:44 Certificate issuer: /CN=A91CAE04/serialNumber=B362437AB67D290C5CDFEF2F62B77EDD8A9FFA44 Certificate serial: 0196 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.mft Manifest number: 018B Signing time: Sun 19 Oct 2025 06:16:13 +0000 Manifest this update: Sun 19 Oct 2025 06:16:12 +0000 Manifest next update: Sun 26 Oct 2025 06:16:12 +0000 Files and hashes: 1: s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.crl (hash: UKCzJOhccFiSHlWaYmlJXL/Kb8jbG0gX9CheYQWDgak=) 2: ABA6DCF0030F11EFB12D8A18C4F9AE02.roa (hash: 8DzejS8W4fMDZxY9d0U5Ub0yW6L6q7unUQ1/+VEKpFE=) 3: 7E40FBBA09EF11EFAA24237EC4F9AE02.roa (hash: M7N4nEDh5dyTQv8ASFX1wDCT+UJFNgGAfP+B+anOP+c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.crl rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:16:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 406 (0x196) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CAE04, serialNumber=B362437AB67D290C5CDFEF2F62B77EDD8A9FFA44 Validity Not Before: Oct 19 06:16:12 2025 GMT Not After : Oct 26 06:16:12 2025 GMT Subject: CN=68f4822d-329f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ca:54:50:89:2b:00:57:22:a2:d6:21:2c:48: aa:37:c9:ec:29:d0:11:32:23:da:07:41:f4:bc:13: bf:63:b0:76:95:04:29:7d:1d:fc:4d:f1:bd:c5:d4: d3:ea:ed:56:ab:e7:e1:32:20:6d:03:98:bc:6d:05: 7d:3d:91:95:11:a3:74:fb:27:4c:98:3b:da:1a:3a: 03:0d:f9:b2:ca:e2:24:fe:b8:bf:9e:04:63:84:cf: 4a:5c:85:c5:d5:d3:83:18:96:ec:3a:2d:f6:dd:7b: ba:9f:a5:5c:e8:51:d6:1b:88:1a:49:33:93:70:c2: 98:79:7c:f0:62:3b:40:17:a3:f2:35:0a:52:8c:ce: 4c:03:4b:a7:30:52:29:15:8b:9f:22:dc:28:c8:17: 61:2a:96:cd:8e:e8:a2:43:02:97:43:1f:5b:97:21: e6:4c:6e:84:74:25:68:6d:dc:46:02:91:5a:08:98: 41:29:9d:a4:49:05:b0:fd:0f:1f:67:16:10:13:86: 9c:37:cc:75:ce:53:9e:23:5e:cf:c0:bf:95:5f:4c: f1:6f:2f:b6:38:80:a9:b5:56:9e:0c:21:41:14:78: 69:1d:b3:c5:bf:14:6c:6d:09:7c:63:0c:a2:5c:87: cd:73:4e:65:64:01:6f:20:56:8b:85:c2:14:b0:04: 1b:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:54:3A:D1:57:A8:4A:F3:45:41:70:8B:95:F2:8F:4A:F0:13:A5:52 X509v3 Authority Key Identifier: keyid:B3:62:43:7A:B6:7D:29:0C:5C:DF:EF:2F:62:B7:7E:DD:8A:9F:FA:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:f1:9a:00:80:43:fc:27:d2:c2:13:ae:1e:ac:19:a1:ea:d1: 51:17:3d:9b:68:46:cf:4d:be:14:3d:27:60:db:e2:99:1b:d5: d4:a6:fd:de:73:fb:c9:2f:58:ec:3c:a3:44:9a:15:3d:0a:8f: 1c:6c:6d:63:11:6a:c9:65:b5:6a:98:3a:c7:9d:3a:05:68:87: 0e:17:55:e4:06:94:6d:b3:e0:6f:21:75:a6:e1:a1:27:1a:f7: 6f:6d:03:e7:de:72:f8:6b:be:7e:94:0c:95:88:05:d0:17:78: fc:7a:20:9e:78:32:da:89:20:23:2b:6d:e4:7a:4b:3a:d0:e6: 9f:e6:72:5b:6c:0a:23:25:b4:4c:5d:2a:58:49:2d:06:88:e1: 1a:c9:97:29:69:70:5c:71:50:0a:a7:bd:f3:83:19:12:b6:a6: 38:5c:17:30:e3:39:5d:a3:bd:89:46:b9:34:fa:4a:89:7d:c4: f9:92:60:d0:79:73:3d:78:7b:59:c7:45:51:cb:7b:1d:14:9a: 9d:6e:67:ed:6d:a9:0a:75:a8:6b:60:4c:35:3f:4e:75:cc:06: ca:4f:eb:c2:6f:3a:e1:0d:f6:e2:07:59:80:41:85:98:48:6b: fa:0e:23:1f:ce:2d:40:1a:b2:22:8e:ca:1b:e0:8d:d7:d5:99: c8:b7:82:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0FFMDQxMTAvBgNVBAUTKEIzNjI0MzdBQjY3RDI5MEM1Q0RGRUYyRjYyQjc3RURE OEE5RkZBNDQwHhcNMjUxMDE5MDYxNjEyWhcNMjUxMDI2MDYxNjEyWjAYMRYwFAYD VQQDEw02OGY0ODIyZC0zMjlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0cpUUIkrAFciotYhLEiqN8nsKdARMiPaB0H0vBO/Y7B2lQQpfR38TfG9xdTT 6u1Wq+fhMiBtA5i8bQV9PZGVEaN0+ydMmDvaGjoDDfmyyuIk/ri/ngRjhM9KXIXF 1dODGJbsOi323Xu6n6Vc6FHWG4gaSTOTcMKYeXzwYjtAF6PyNQpSjM5MA0unMFIp FYufItwoyBdhKpbNjuiiQwKXQx9blyHmTG6EdCVobdxGApFaCJhBKZ2kSQWw/Q8f ZxYQE4acN8x1zlOeI17PwL+VX0zxby+2OICptVaeDCFBFHhpHbPFvxRsbQl8Ywyi XIfNc05lZAFvIFaLhcIUsAQbaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLRUOtFX qErzRUFwi5Xyj0rwE6VSMB8GA1UdIwQYMBaAFLNiQ3q2fSkMXN/vL2K3ft2Kn/pE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQUUwNC85RDhGNzcyQTVG OTYxMUVFODM2MzhGM0VDNEY5QUUwMi9zMkpEZXJaOUtReGMzLTh2WXJkLTNZcWYt a1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3MySkRlclo5S1F4YzMtOHZZcmQtM1lxZi1rUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QUUwNC85RDhGNzcyQTVGOTYxMUVFODM2MzhGM0VDNEY5QUUwMi9zMkpEZXJaOUtR eGMzLTh2WXJkLTNZcWYta1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCC8ZoAgEP8J9LCE64erBmh6tFRFz2baEbPTb4UPSdg2+KZG9XUpv3e c/vJL1jsPKNEmhU9Co8cbG1jEWrJZbVqmDrHnToFaIcOF1XkBpRts+BvIXWm4aEn GvdvbQPn3nL4a75+lAyViAXQF3j8eiCeeDLaiSAjK23keks60Oaf5nJbbAojJbRM XSpYSS0GiOEayZcpaXBccVAKp73zgxkStqY4XBcw4zldo72JRrk0+kqJfcT5kmDQ eXM9eHtZx0VRy3sdFJqdbmftbakKdahrYEw1P051zAbKT+vCbzrhDfbiB1mAQYWY SGv6DiMfzi1AGrIijsob4I3X1ZnIt4JO -----END CERTIFICATE-----Generated at Tue Oct 21 02:24:56 2025 by rpki-client